
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft
File: LToKI8WbTfbb4BpMXzt8i___cA0.mft (raw, json)
Hash identifier: z30QMlQSHZVFlZ52clI/Z8Gu94JGq0GshQwXSzbyW+0=
Subject key identifier: 02:DD:BB:05:7B:E0:7B:32:22:F7:65:2A:F4:41:B6:B1:0A:D8:05:BB
Authority key identifier: 2D:3A:0A:23:C5:9B:4D:F6:DB:E0:1A:4C:5F:3B:7C:8B:FF:FF:70:0D
Certificate issuer: /CN=A912D0BC/serialNumber=2D3A0A23C59B4DF6DBE01A4C5F3B7C8BFFFF700D
Certificate serial: 031A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LToKI8WbTfbb4BpMXzt8i___cA0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft
Manifest number: 0313
Signing time: Sat 03 Oct 2026 01:24:51 +0000
Manifest this update: Sat 03 Oct 2026 01:24:50 +0000
Manifest next update: Sat 10 Oct 2026 01:24:50 +0000
Files and hashes: 1: LToKI8WbTfbb4BpMXzt8i___cA0.crl (hash: NHxMOtntkNuZjKH52eS1P2vVUgO3a40aMUcOyU95M3M=)
2: C202E82834B611ED815AAB32C4F9AE02.roa (hash: FkAIc4PkSrjwjHI3WuneOyjO69joINPbfIEPkCYw/A0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.crl
rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LToKI8WbTfbb4BpMXzt8i___cA0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 01:24:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 794 (0x31a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D0BC, serialNumber=2D3A0A23C59B4DF6DBE01A4C5F3B7C8BFFFF700D
Validity
Not Before: Oct 3 01:24:50 2026 GMT
Not After : Oct 10 01:24:50 2026 GMT
Subject: CN=6ac05963-768f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:25:c8:7f:73:2a:6b:74:93:eb:1d:17:58:9a:
18:eb:b3:31:87:14:d3:08:ff:7d:c1:13:b7:b4:fe:
3e:06:3b:0e:8a:07:22:cd:ff:c4:ec:b0:f1:6f:ef:
8f:9f:78:f4:6d:47:19:e2:7e:06:c4:4b:13:33:7a:
02:d7:a3:7a:4a:ef:1e:01:db:fb:cb:01:91:7a:cf:
b0:8b:d1:29:8b:86:e5:69:33:7b:7e:ec:4d:99:f7:
db:79:ac:23:93:8a:53:b7:73:6d:80:71:99:60:d7:
ef:a4:ee:19:56:52:0e:f1:76:b8:f3:76:de:bf:45:
f3:27:5c:8c:5d:5f:0b:84:06:87:b8:4e:97:3c:81:
70:ed:6f:e5:a2:27:48:ea:f1:4d:f8:15:83:6e:18:
70:97:22:ae:3a:8a:28:55:b9:82:0f:7c:78:f6:4d:
b4:3d:98:33:0c:26:ae:b6:57:3c:f4:43:db:5e:d6:
eb:33:0f:fb:23:07:41:c7:f3:ad:48:9f:8c:eb:55:
a1:d3:c0:1a:2c:20:0d:76:8b:ab:f5:c6:72:fa:1b:
71:e1:f1:cb:97:6a:9d:c9:fd:60:41:51:40:a4:35:
ca:3c:81:20:dc:2b:83:61:1d:f3:67:4c:b6:d9:74:
a7:76:b8:00:e6:b1:af:a0:a7:bb:7e:78:11:a7:b5:
5d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DD:BB:05:7B:E0:7B:32:22:F7:65:2A:F4:41:B6:B1:0A:D8:05:BB
X509v3 Authority Key Identifier:
keyid:2D:3A:0A:23:C5:9B:4D:F6:DB:E0:1A:4C:5F:3B:7C:8B:FF:FF:70:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LToKI8WbTfbb4BpMXzt8i___cA0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:42:96:be:40:aa:11:a0:41:2b:bb:92:ed:32:af:7b:03:38:
51:39:ed:63:e1:6a:0a:7c:9a:ca:57:8c:f6:81:65:aa:18:41:
56:13:49:b1:ff:c7:7a:fb:f0:6a:d2:71:95:35:1f:bd:87:d2:
e2:66:db:fb:ad:8f:4c:22:49:c0:2e:09:cb:57:f6:c8:0f:ea:
ab:98:8e:b0:27:d2:de:70:94:6b:83:3c:bd:0c:ca:d4:8f:2b:
7c:28:e5:1d:3a:9f:e0:5e:3f:61:c2:d1:fd:e6:26:51:66:cd:
6e:1c:51:8c:2b:9f:02:bf:41:70:9d:85:c3:f7:6a:1e:60:91:
b1:86:d0:e1:44:50:cd:27:55:76:f4:66:87:92:69:4c:e1:53:
76:31:1e:ea:9b:97:d5:ee:86:f4:8b:d6:34:ef:8c:3f:52:6e:
85:25:10:70:22:25:02:f5:d9:71:ef:ec:e4:5b:27:2c:e1:0c:
91:57:82:db:15:1d:bd:72:5c:e8:1a:be:9b:3b:ea:79:8d:17:
a5:dc:96:13:8f:fa:ab:30:19:cd:b7:b2:28:34:e0:63:24:ad:
e8:42:7c:66:88:87:32:d1:1c:58:0c:91:e6:b7:5f:b7:37:20:
f5:57:89:20:07:34:41:62:db:79:5b:7b:b1:81:3e:d3:17:b1:
7e:ba:9d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:33:40 2026 by rpki-client